Threats tagged 'ghsa-wfvp-xw34-rhwq'

CVE-2026-20034 is a high-severity vulnerability in the web-based management interface of Cisco Unity Connection. It allows an authenticated remote attacker to execute arbitrary code as root by submitting a crafted API request. Exploitation requires valid user credentials. The flaw arises from insufficient validation of user-supplied input, potentially leading to full device compromise.